Re: how to log access to important files

bob.elliott@xxxxxxxxxxxx wrote:
I'm running Windows 2000, due to security reasons I need to log some
file operations. Say, I need to know all file operation (open, modify,
delete) for folder D:\Docs. Is there any way to do so?

Windows 2000 supports Auditing which can be defined on almost any
object, but this would fill up your Security Event Log and therefore
should be limited to important objects only.

So you may take a look at Filemon from Sysinternals. It has an option to
link in at boot process and then keeps on silently logging everything
until the GUI the next time.
.

Relevant Pages

  • Re: read and write permission does not delete word ~ files
    ... Ah yes on a file the only diff is delete, on a folder it is delete and deleted ... Based on how Windows apps tend to modify files if you can write and you can ... Joe Richards Microsoft MVP Windows Server Directory Services ... >>In the advanced tab you can specify delete permission instead of giving ...
    (microsoft.public.windows.server.security)
  • Re: remove ability to delete doc
    ... Within Word itself, 'modify' means making changes ... Within Windows, 'modify' means changing the ... contents of a folder -- ie, add, change or delete files. ...
    (microsoft.public.word.docmanagement)
  • Re: default folder for Word 97 documents
    ... I seem to remember that Windows 98 did not use the profile path for My ... My Documents folder and enter its true path. ... > navigate to the folder in the Modify dialog. ...
    (microsoft.public.word.docmanagement)
  • NTFS Permissions variance
    ... A client of ours has a windows 2000 server and has set security on a ... Read and execute ... List Folder Contents ... modify the same document. ...
    (microsoft.public.win2000.general)
  • Re: Send / Send to options
    ... marfers notes for windows xp ... >I know how to modify the "send to" folder in 'windows ...
    (microsoft.public.windowsxp.help_and_support)